Before changing firmware, freeze a small evidence pack that identifies the device, the planned bytes and the recovery owner. The pack does not choose a file for you; it makes a wrong assumption visible before the miner is changed.
A reachable web interface proves only that part of the device booted. Call the installation successful only after the expected build identity, hardware inventory, cooling, pool connection and accepted work are read back over an appropriate observation window.